Configure firewall rules, policies, aliases, and IPSets for your virtual machine
-{{ $error }}
-- @if($firewallEnabled) - Active and protecting your virtual machine - @else - Currently disabled - your VM is not protected - @endif -
-Control default traffic behavior
-Default action for incoming traffic not matching any rule
-Default action for outgoing traffic not matching any rule
-Per-adapter firewall control
-{{ $adapter['mac'] }}
- @endif
- No network adapters found
-How default policies control your network traffic
-Controls what happens to traffic coming INTO your VM when it doesn't match any explicit firewall rule.
-Controls what happens to traffic going OUT of your VM when it doesn't match any explicit firewall rule.
-To create a strict whitelist (only allow specific traffic):
-IP Filter: Validates that source/destination IP addresses in packets match the VM's assigned IPs. Helps prevent IP spoofing.
-MAC Filter: Validates that MAC addresses match the VM's network adapters. Provides additional layer of security.
-| Pos | -Action | -Type | -Source | -Destination | -Protocol | -Port | -Status | -Actions | -
|---|---|---|---|---|---|---|---|---|
| {{ $rule['pos'] ?? '-' }} | -- @php - $actionClass = match($rule['action'] ?? '') { - 'ACCEPT' => 'bg-success/20 text-success', - 'REJECT' => 'bg-warning/20 text-warning', - 'DROP' => 'bg-error/20 text-error', - default => 'bg-base/20 text-base/60' - }; - @endphp - - {{ $rule['action'] ?? '-' }} - - | -- - {{ strtoupper($rule['type'] ?? 'IN') }} - - | -{{ $rule['source'] ?? '-' }} | -{{ $rule['dest'] ?? '-' }} | -{{ strtoupper($rule['proto'] ?? ($rule['macro'] ?? 'ANY')) }} | -{{ $rule['dport'] ?? $rule['sport'] ?? '-' }} | -- @if(isset($rule['enable']) && $rule['enable'] == 0) - Disabled - @else - Enabled - @endif - | -
-
-
-
-
-
- |
-
Create your first rule to control network traffic
- -Create named references to IP addresses or CIDR ranges
-Create aliases to simplify rule management
- -Group multiple IPs/CIDRs for easier rule management
-No IP Sets created yet
-No members in this IPSet
- -Select an IP Set to view its members
-{{ $logError }}
-| Time | -Action | -Source | -Destination | -Protocol | -Port | -|
|---|---|---|---|---|---|---|
| {{ $log['timestamp'] ?? '-' }} | -- - {{ $log['action'] ?? '-' }} - - | -
-
- {{ $log['source'] ?? '-' }}
- @php $sourceIP = $log['source'] ?? ''; @endphp
- @if($sourceIP && $sourceIP !== '-' && $this->checkIsPublicIP($sourceIP))
-
-
-
-
- {{-- IP Location Modal --}}
-
-
- @endif
- |
-
-
- {{ $log['destination'] ?? '-' }}
- @php $destIP = $log['destination'] ?? ''; @endphp
- @if($destIP && $destIP !== '-' && $this->checkIsPublicIP($destIP))
-
-
-
-
- {{-- IP Location Modal --}}
-
-
- @endif
- |
-
-
- {{ $log['destination'] ?? '-' }}
- @php $destIP = $log['destination'] ?? ''; @endphp
- @if($destIP && $destIP !== '-' && $this->checkIsPublicIP($destIP))
-
-
-
-
- {{-- IP Location Modal --}}
-
-
- @endif
- |
- {{ $log['protocol'] ?? '-' }} | -{{ $log['destination_port'] ?? '-' }} | -
Logs will appear here when the firewall blocks or allows traffic
-Enable the firewall to start protecting your virtual machine
-Select a macro or leave as "None" for custom rules
-Can use alias names or leave empty for any source
-Are you sure you want to delete this rule? This action cannot be undone.
-Delete alias "{{ $deletingAliasName }}"?
-This may affect firewall rules using this alias.
-After creating the IPSet, you can add IP addresses and CIDR ranges to it.
-Delete IPSet "{{ $deletingIPSetName }}"?
-All members will be removed and rules using this IPSet may be affected.
-Remove "{{ $deletingMemberCidr }}" from {{ $selectedIPSetName }}?
-Configure firewall rules, policies, aliases, and IPSets for your virtual machine
+{{ $error }}
+Enable or disable the firewall for this virtual machine
++ @if($firewallEnabled) + Active and protecting your virtual machine + @else + Currently disabled - your VM is not protected + @endif +
Enable or disable firewall for each network adapter
-{{ $adapter['mac'] }}Enables or disables the firewall ability for this network adapter
-Control default traffic behavior
No network adapters found
-Default action for incoming traffic not matching any rule
+Default action for outgoing traffic not matching any rule
+Manage allow and block rules for network traffic
+Per-adapter firewall control
| Order | -Action | -Source | -Destination | -Protocol | -Port | -Status | -Actions | -
|---|---|---|---|---|---|---|---|
| {{ $rule['pos'] ?? '-' }} | -- @php - $actionClass = match($rule['action'] ?? '') { - 'ACCEPT' => 'bg-success/20 text-success', - 'REJECT' => 'bg-warning/20 text-warning', - 'DROP' => 'bg-error/20 text-error', - default => '' - }; - @endphp - - {{ $rule['action'] ?? '-' }} - - | -
-
- {{ $rule['source'] ?? '-' }}
-
-
-
-
-
-
+ @if(count($networkAdapters) > 0)
+
+ @foreach($networkAdapters as $adapter)
+
+
+
+ {{ $adapter['name'] }}
+
+ Model: {{ ucfirst($adapter['model'] ?? 'Unknown') }}
+ @if($adapter['mac'])
+ MAC:
- {{ $adapter['mac'] }}
+ @endif
|
-
-
- {{ $rule['dest'] ?? '-' }}
-
-
-
-
-
-
-
- |
- {{ strtoupper($rule['proto'] ?? 'any') }} | -{{ $rule['dport'] ?? $rule['sport'] ?? '-' }} | -- @if(isset($rule['enable']) && $rule['enable'] == 0) - Disabled - @else - Enabled - @endif - | -
-
-
-
-
-
- |
-
No firewall rules configured
-No network adapters found
+- Recent firewall activity and blocked/allowed connections - - ({{ count($firewallLogs) }} entries loaded) - -
+ {{-- Policy Info Modal --}} + @if($showPolicyInfoModal) +How default policies control your network traffic
+Controls what happens to traffic coming INTO your VM when it doesn't match any explicit firewall rule.
+Controls what happens to traffic going OUT of your VM when it doesn't match any explicit firewall rule.
+To create a strict whitelist (only allow specific traffic):
+IP Filter: Validates that source/destination IP addresses in packets match the VM's assigned IPs. Helps prevent IP spoofing.
+MAC Filter: Validates that MAC addresses match the VM's network adapters. Provides additional layer of security.
+{{ $logError }}
-| Pos | +Action | +Type | +Source | +Destination | +Protocol | +Port | +Status | +Actions | +
|---|---|---|---|---|---|---|---|---|
| {{ $rule['pos'] ?? '-' }} | ++ @php + $actionClass = match($rule['action'] ?? '') { + 'ACCEPT' => 'bg-success/20 text-success', + 'REJECT' => 'bg-warning/20 text-warning', + 'DROP' => 'bg-error/20 text-error', + default => 'bg-base/20 text-base/60' + }; + @endphp + + {{ $rule['action'] ?? '-' }} + + | ++ + {{ strtoupper($rule['type'] ?? 'IN') }} + + | +{{ $rule['source'] ?? '-' }} | +{{ $rule['dest'] ?? '-' }} | +{{ strtoupper($rule['proto'] ?? ($rule['macro'] ?? 'ANY')) }} | +{{ $rule['dport'] ?? $rule['sport'] ?? '-' }} | ++ @if(isset($rule['enable']) && $rule['enable'] == 0) + Disabled + @else + Enabled + @endif + | +
+
+
+
+
+
+ |
+
Create your first rule to control network traffic
+ +Create named references to IP addresses or CIDR ranges
| - - | -- - | -- - | -- - | -- - | -- - | -- - | -- - | -- Actions - | -|||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| - - - | - - | - - -- - | - - -
-
-
-
-
-
-
-
-
-
-
-
-
- |
-
-
-
-
-
-
-
-
-
-
-
-
-
- |
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- |
-
-
-
-
-
-
-
-
-
-
-
-
-
- |
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- |
-
-
-
-
-
-
-
-
+ {{-- IPSETS TAB --}}
+
+
+
+
+
+
+
+ IP Sets+Group multiple IPs/CIDRs for easier rule management +
+ {{-- IPSets List --}}
+
+ Available IP Sets+ @if(count($ipsets) > 0) +
+ @foreach($ipsets as $ipset)
+
+
+
-
+
+ {{ $ipset['name'] }}
+ @if(!empty($ipset['comment']))
+ {{ $ipset['comment'] }}
+ @endif
+
+
|
+
+ @endforeach
+
+ @else
+
| Time | +Action | +Source | +Destination | +Protocol | +Port |
|---|
No logs matched your search.
-Logs will appear here when the firewall blocks or allows traffic
+No firewall logs available
-Ensure firewall logging is enabled in Proxmox (Datacenter > Firewall > Options)
-Enable the firewall above to manage firewall rules.
+Enable the firewall to start protecting your virtual machine
+Select a macro or leave as "None" for custom rules
+Can use alias names or leave empty for any source
+Are you sure you want to delete this rule? This action cannot be undone.
+Delete alias "{{ $deletingAliasName }}"?
+This may affect firewall rules using this alias.
+After creating the IPSet, you can add IP addresses and CIDR ranges to it.
+Delete IPSet "{{ $deletingIPSetName }}"?
+All members will be removed and rules using this IPSet may be affected.
+Remove "{{ $deletingMemberCidr }}" from {{ $selectedIPSetName }}?
+{{ $error }}
-- Are you sure you want to delete this firewall rule? This action cannot be undone and may affect your network security. -
- @if($ruleToDelete) -{{ $ruleToDelete['source'] }}
- {{ $ruleToDelete['dest'] }}
- Enable or disable the firewall for this virtual machine
+Enable or disable firewall for each network adapter
+{{ $adapter['mac'] }}Enables or disables the firewall ability for this network adapter
+No network adapters found
+Manage allow and block rules for network traffic
+| Order | +Action | +Source | +Destination | +Protocol | +Port | +Status | +Actions | +
|---|---|---|---|---|---|---|---|
| {{ $rule['pos'] ?? '-' }} | ++ @php + $actionClass = match($rule['action'] ?? '') { + 'ACCEPT' => 'bg-success/20 text-success', + 'REJECT' => 'bg-warning/20 text-warning', + 'DROP' => 'bg-error/20 text-error', + default => '' + }; + @endphp + + {{ $rule['action'] ?? '-' }} + + | +
+
+ {{ $rule['source'] ?? '-' }}
+
+
+
+
+
+
+
+ |
+
+
+ {{ $rule['dest'] ?? '-' }}
+
+
+
+
+
+
+
+ |
+ {{ strtoupper($rule['proto'] ?? 'any') }} | +{{ $rule['dport'] ?? $rule['sport'] ?? '-' }} | ++ @if(isset($rule['enable']) && $rule['enable'] == 0) + Disabled + @else + Enabled + @endif + | +
+
+
+
+
+
+ |
+
No firewall rules configured
++ Recent firewall activity and blocked/allowed connections + + ({{ count($firewallLogs) }} entries loaded) + +
+{{ $logError }}
+| + + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ + | ++ Actions + | +
|---|---|---|---|---|---|---|---|---|
| + + + | + + | + + ++ + | + + +
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+ |
+
No logs matched your search.
+No firewall logs available
+Ensure firewall logging is enabled in Proxmox (Datacenter > Firewall > Options)
+Enable the firewall above to manage firewall rules.
+{{ $error }}
++ Are you sure you want to delete this firewall rule? This action cannot be undone and may affect your network security. +
+ @if($ruleToDelete) +{{ $ruleToDelete['source'] }}
+ {{ $ruleToDelete['dest'] }}
+